1.1 We are pleased that you are visiting our website and thank you for your interest.

In the following, we inform you about how we handle your personal data when you use our website.

Personal data refers to any information relating to an identified or identifiable natural person.

1.2 Verantwortlicher für data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Axel Meyer, M Projekt GmbH, Adolf-Sturm-Straße 20a, 82211 Herrsching, Germany, Email: enjoy@autotecture.de The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2.1 When using our website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the site
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

3.1 Amazon Web Services

To host our website and display its content, we use the services of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

 

3.2 Wix

To host our website and display its content, we use the services of the following provider: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Data is also transferred to: Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

All data collected on our website is processed on the provider’s servers.

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

For data transfers to the provider’s location, an adequate level of data protection is ensured through an adequacy decision of the European Commission.

For transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

 

3.3 Google Cloud CDN

We use a content delivery network provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service enables us to deliver large media files such as graphics, website content, or scripts more quickly via a network of regionally distributed servers. The processing is based on our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR.

Data may also be transferred to: Google LLC, USA

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

To make visiting our website attractive and to enable the use of certain functions, we use cookies — small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain stored on your device for a longer period to allow saving of site preferences (so-called “persistent cookies”). You can find the specific storage duration in the cookie settings overview of your browser.

 

If personal data is also processed through individual cookies we use, the processing is carried out either in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR if you have given your consent, or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible functionality of the website and a user-friendly, effective experience for visitors.

 

You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them, accept cookies in certain cases only, or generally exclude them.

Please note that if you do not accept cookies, the functionality of our website may be limited.

When contacting us (e.g. via contact form or email), personal data is collected. The specific data collected when using a contact form can be seen directly from the respective form. This data is stored and used solely for the purpose of responding to your inquiry and for the related technical administration.

 

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR.

 

Your data will be deleted once your inquiry has been fully resolved, provided there are no statutory retention requirements that would prevent deletion.

6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is optional and will be used to address you personally.

We use the so-called double opt-in procedure for sending the newsletter. This means we will only send you a newsletter by email once you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm your subscription by clicking a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR.

When registering for the newsletter, we store your IP address, as entered by your Internet service provider (ISP), as well as the date and time of registration. This is done in order to trace possible misuse of your email address at a later time.

The data collected during the newsletter registration is used exclusively for promotional purposes via the newsletter.

You can unsubscribe from the newsletter at any time using the link provided in each newsletter or by contacting the controller mentioned at the beginning of this privacy policy. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data in any other way that is legally permitted and about which we inform you in this privacy policy.

6.2 Newsletter dispatch to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with § 7(3) of the German Unfair Competition Act (UWG), we do not need to obtain separate consent from you for this. The data processing is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR.

If you initially objected to the use of your email address for this purpose, no email will be sent by us.

You have the right to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning of this privacy policy. You will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately stopped.

Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users as an interactive interface upon visiting the site, allowing them to give consent by ticking boxes for specific cookies and/or cookie-based services. Only after the user has actively given their consent by ticking the relevant box will such cookies/services be activated.

This ensures that such cookies are only stored on the user’s device if consent has been given.

 

The tool itself sets technically necessary cookies to store your cookie preferences. In general, no personal data is processed in this context.

 

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly cookie consent management and therefore a legally compliant design of our website.

 

An additional legal basis for the processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to ensure that the use of non-essential cookies depends on user consent.

 

Where necessary, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

 

Further information about the provider and configuration options of the cookie consent tool can be found directly in the corresponding interface on our website.

8.1 Das geltende Datenschutzrecht gewährt Ihnen gegenüber dem Verantwortlichen hinsichtlich der Verarbeitung Ihrer personenbezogenen Daten die nachstehenden Betroffenenrechte (Auskunfts- und Interventionsrechte), wobei für die jeweiligen Ausübungsvoraussetzungen auf die angeführte Rechtsgrundlage verwiesen wird:
- Auskunftsrecht gemäß Art. 15 DSGVO;
- Recht auf Berichtigung gemäß Art. 16 DSGVO;
- Recht auf Löschung gemäß Art. 17 DSGVO;
- Recht auf Einschränkung der Verarbeitung gemäß Art. 18 DSGVO;
- Recht auf Unterrichtung gemäß Art. 19 DSGVO;
- Recht auf Datenübertragbarkeit gemäß Art. 20 DSGVO;
- Recht auf Widerruf erteilter Einwilligungen gemäß Art. 7 Abs. 3 DSGVO;
- Recht auf Beschwerde gemäß Art. 77 DSGVO.

8.2 RIGHT TO OBJECT

If we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

 

If you exercise your right to object, we will stop processing the affected data. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

 

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. You can exercise the objection as described above.

 

If you exercise your right to object, we will stop processing the relevant data for direct marketing purposes.

The duration of the storage of personal data is determined by the applicable legal basis, the purpose of processing, and—if relevant—any statutory retention periods (e.g. commercial and tax law retention obligations).

 

When processing personal data based on explicit consent in accordance with Art. 6(1)(a) GDPR, the data is stored until the data subject withdraws their consent.

 

If statutory retention periods apply to data that is processed on the basis of Art. 6(1)(b) GDPR in connection with contractual or pre-contractual obligations, the data will be routinely deleted after the retention period has expired, provided it is no longer required for contract fulfillment or initiation and there is no legitimate interest in continued storage.

 

When personal data is processed on the basis of Art. 6(1)(f) GDPR, it will be stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless compelling legitimate grounds for the processing can be demonstrated that outweigh the data subject’s interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

 

If personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it will be stored until the data subject exercises their right to object under Art. 21(2) GDPR.

 

Unless otherwise stated in the specific processing situations described in this privacy policy, personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.